Lucene search
K

3482 matches found

CVE
CVE
added 2026/01/02 2:2 p.m.12 views

CVE-2026-0565

CVE-2026-0565 affects code-projects Content Management System 1.0. The vulnerability arises from improper handling of the del parameter in the file /admin/delete.php, enabling remote SQL injection without authentication or user interaction. Multiple sources (NVD, Red Hat, CVE feeds) describe the ...

9.8CVSS7.3AI score0.0002EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2026/01/02 2:2 p.m.21 views

CVE-2026-0565 code-projects Content Management System delete.php sql injection

A weakness has been identified in code-projects Content Management System 1.0. This issue affects some unknown processing of the file /admin/delete.php. Executing a manipulation of the argument del can lead to sql injection. The attack can be executed remotely. The exploit has been made available...

7.5CVSS0.0002EPSS
Exploits1References5
Cvelist
Cvelist
added 2026/01/02 9:2 a.m.19 views

CVE-2026-0546 code-projects Content Management System search.php sql injection

A vulnerability was determined in code-projects Content Management System 1.0. This impacts an unknown function of the file search.php. This manipulation of the argument Value causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may ...

7.5CVSS0.00006EPSS
Exploits1References5
CVE
CVE
added 2026/01/02 9:2 a.m.8 views

CVE-2026-0546

Code-projects Content Management System 1.0 contains a SQL injection in search.php via manipulation of the Value parameter. This vulnerability can be exploited remotely and has publicly disclosed exploit information. Multiple connected sources (PT-2026-1061, Red Hat/CVE feed, NVD/CVE entry, CNNVD...

9.8CVSS7.2AI score0.00006EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/02 9:2 a.m.3 views

CVE-2026-0546 code-projects Content Management System search.php sql injection

A vulnerability was determined in code-projects Content Management System 1.0. This impacts an unknown function of the file search.php. This manipulation of the argument Value causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may ...

7.5CVSS6.6AI score0.00006EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2026/01/02 12:0 a.m.5 views

PT-2026-1066

Name of the Vulnerable Software and Affected Versions code-projects Content Management System version 1.0 Description A flaw exists in code-projects Content Management System that involves the processing of the /admin/delete.php file. Manipulation of the del argument within this file can lead to...

7.5CVSS6.9AI score0.0002EPSS
Exploits1References11
CNNVD
CNNVD
added 2026/01/02 12:0 a.m.1 views

Code-Projects Content Management System 代码问题漏洞

Code-Projects Content Management System is a Code-Projects open source content and management system. A code issue vulnerability exists in Code-Projects Content Management System version 1.0, which stems from an incorrect manipulation of the parameter image in the file /admin/editposts.php, which...

9.8CVSS5.2AI score0.00036EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2026/01/02 12:0 a.m.4 views

PT-2026-1107

Name of the Vulnerable Software and Affected Versions code-projects Content Management System version 1.0 Description A security issue exists in code-projects Content Management System. The manipulation of the image argument in a file, /admin/edit posts.php, allows for unrestricted file upload...

5.8CVSS6.2AI score0.00036EPSS
Exploits1References9
CNNVD
CNNVD
added 2026/01/02 12:0 a.m.3 views

code-projects Content Management System SQL注入漏洞

Code-Projects Content Management System is an open source content and management system from Code-Projects. A SQL injection vulnerability exists in code-projects Content Management System version 1.0, which stems from incorrect manipulation of the parameter ID in the file /pages.php, which could...

9.8CVSS7.8AI score0.0002EPSS
Exploits1References6
CNNVD
CNNVD
added 2026/01/02 12:0 a.m.4 views

code-projects Content Management System SQL注入漏洞

Code-Projects Content Management System is an open source content and management system from Code-Projects. A SQL injection vulnerability exists in code-projects Content Management System version 1.0, which stems from an incorrect manipulation of the parameter Value in the file search.php, which...

9.8CVSS7.7AI score0.00006EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2026/01/02 12:0 a.m.5 views

PT-2026-1112

Name of the Vulnerable Software and Affected Versions code-projects Content Management System version 1.0 Description A flaw exists in code-projects Content Management System that allows for SQL injection. The issue is located in the /pages.php file, specifically through manipulation of the ID...

7.5CVSS6.9AI score0.0002EPSS
Exploits1References9
CNNVD
CNNVD
added 2026/01/02 12:0 a.m.2 views

Code-Projects Content Management System SQL注入漏洞

Code-Projects Content Management System is a Code-Projects open source content and management system. A SQL injection vulnerability exists in code-projects Content Management System version 1.0, which stems from an incorrect manipulation of the parameter del in the file /admin/delete.php, which...

9.8CVSS7.1AI score0.0002EPSS
Exploits1References6
CNNVD
CNNVD
added 2026/01/02 12:0 a.m.3 views

Code-Projects Online Music Site SQL注入漏洞

Code-Projects Online Music Site is an open source online music site by Code-Projects. A SQL injection vulnerability exists in Code-Projects Online Music Site version 1.0, which stems from an incorrect manipulation of the parameter fname in the file /Frontend/Feedback.php, which could lead to a SQ...

9.8CVSS7.6AI score0.00006EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2026/01/02 12:0 a.m.5 views

PT-2026-1061

Name of the Vulnerable Software and Affected Versions code-projects Content Management System version 1.0 Description A flaw exists in code-projects Content Management System that allows for SQL injection. The issue is located in the search.php file and involves manipulation of the Value argument...

7.5CVSS6.9AI score0.00006EPSS
Exploits1References11
Positive Technologies
Positive Technologies
added 2026/01/02 12:0 a.m.4 views

PT-2026-1115

Name of the Vulnerable Software and Affected Versions code-projects Online Music Site version 1.0 Description A flaw exists in code-projects Online Music Site 1.0 that allows for SQL injection. The issue is located in the /Frontend/AlbumByCategory.php file, specifically through manipulation of th...

7.5CVSS7AI score0.0002EPSS
Exploits1References10
CNNVD
CNNVD
added 2026/01/02 12:0 a.m.2 views

Code-Projects Online Music Site SQL注入漏洞

Code-Projects Online Music Site is an open source online music site by Code-Projects. A SQL injection vulnerability exists in Code-Projects Online Music Site version 1.0, which stems from incorrect manipulation of the parameter ID in the file /Frontend/ViewSongs.php, which could lead to a SQL...

9.8CVSS7.6AI score0.0002EPSS
Exploits1References6
NVD
NVD
added 2026/01/01 7:15 p.m.3 views

CVE-2025-15410

A vulnerability was identified in code-projects Online Guitar Store 1.0. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument Lemail leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available a...

9.8CVSS0.0002EPSS
Exploits1References5
Cvelist
Cvelist
added 2026/01/01 7:2 p.m.24 views

CVE-2025-15410 code-projects Online Guitar Store login.php sql injection

A vulnerability was identified in code-projects Online Guitar Store 1.0. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument Lemail leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available a...

7.5CVSS0.0002EPSS
Exploits1References5
CVE
CVE
added 2026/01/01 7:2 p.m.6 views

CVE-2025-15410

Code-Projects Online Guitar Store 1.0 is affected by a SQL injection in login.php via the L_email parameter. Multiple sources (NVD, Red Hat, CVE listings, and PT Security) confirm remote exploitation and that a public exploit exists. The vulnerability stems from improper handling of input in /log...

9.8CVSS6.9AI score0.0002EPSS
Exploits1References5Affected Software1
CVE
CVE
added 2026/01/01 6:32 p.m.6 views

CVE-2025-15409

CVE-2025-15409 affects code-projects Online Guitar Store 1.0. The vulnerability is an SQL injection in /admin/Delete_product.php via manipulation of the del_pro parameter, exploitable remotely. Public disclosures exist. Impact includes potential disclosure/integrity/availability harm as per CVSS ...

9.8CVSS7.2AI score0.00006EPSS
Exploits1References5Affected Software1
Rows per page
Query Builder